Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-7327. PoCs published by Ahmet Ümit BAYRAM. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated arbitrary file read vulnerability in Ozeki 10 SMS Gateway 10.3.208 via directory traversal. The PoC uses a curl command to read the 'win.ini' file by exploiting path traversal sequences.
Description
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service, leading to disclosure of sensitive information.
Exploits (1)
This exploit demonstrates an unauthenticated arbitrary file read vulnerability in Ozeki 10 SMS Gateway 10.3.208 via directory traversal. The PoC uses a curl command to read the 'win.ini' file by exploiting path traversal sequences.
Nuclei Templates (1)
References (3)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N